Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ash-project ash_cloak 0.4.0 Clear all filters
TI-2026-56151 CVE-2026-81322

Cloaked plaintext leaks through a non-sensitive action argument in AshCloak

Priority MEDIUM 44

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to reco…

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00116 Published 2026-08-30 Fixed in 0.4.0 CWE-200
TI-2026-56148 CVE-2026-81319

Unsafe deserialization of decrypted terms enables node DoS in AshCloak

Priority MEDIUM 60

Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompress…

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00367 Published 2026-08-30 Fixed in 0.4.0 CWE-502